$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/CE67353C70C411EF9CC65F6BC4F9AE02.roa File: CE67353C70C411EF9CC65F6BC4F9AE02.roa (raw, json) Hash identifier: rG7e+gQHO09BhaZyxgKumjkjD+0lNF/5Si0fOekLq8c= Subject key identifier: EA:8C:1E:6D:8C:AF:00:FA:8F:40:42:2D:E8:87:A5:7F:C8:C4:B7:EE Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0AA4 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/CE67353C70C411EF9CC65F6BC4F9AE02.roa Signing time: Thu 12 Sep 2024 05:06:45 +0000 ROA not before: Thu 12 Sep 2024 05:06:45 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 9311 IP address blocks: 43.239.107.0/24 maxlen: 24 103.244.221.0/24 maxlen: 24 103.244.223.0/24 maxlen: 24 103.249.184.0/24 maxlen: 24 103.249.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2724 (0xaa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Sep 12 05:06:45 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e276e5-6ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:38:d5:74:b0:5a:42:9d:cc:e6:cb:0f:30:55: 56:92:c1:18:a1:c1:57:f4:bb:06:e0:af:9e:7f:e8: a6:12:72:40:ed:93:f5:75:60:d0:c5:1f:6b:6f:9e: e8:21:43:0b:a8:e0:0d:22:65:51:16:31:01:cb:d9: dc:a1:ba:10:21:73:b2:9f:f9:e4:8c:95:5d:f6:38: 57:71:a1:3d:ad:a1:20:36:4e:52:e7:06:7b:8e:7a: e2:bc:9e:a8:f0:f6:48:b6:08:8f:42:6b:e4:97:c3: 68:86:07:7c:88:18:a1:22:38:83:bd:00:d5:f3:ca: b4:d0:26:d5:3f:f2:33:67:67:3f:f7:ae:29:74:55: 42:b8:ee:1c:3c:44:48:93:20:67:d7:f3:97:ba:a8: 6c:f9:73:c2:fa:84:24:70:b0:b4:41:35:e0:d6:d7: 45:a6:a4:46:67:06:e2:c4:3e:80:cd:df:8b:77:32: b1:9b:ce:38:fb:8a:fc:b4:05:53:3e:c8:4c:4f:36: 1c:2e:68:08:02:59:8c:5d:f6:3c:e3:93:a3:70:e3: 80:63:df:c4:03:82:0b:fa:40:29:93:e7:27:2f:76: 10:09:53:d6:d8:dd:83:5e:9f:16:18:2c:cc:8b:e6: c4:06:fa:16:e1:45:4a:5c:6d:85:a5:ff:94:81:59: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8C:1E:6D:8C:AF:00:FA:8F:40:42:2D:E8:87:A5:7F:C8:C4:B7:EE X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/CE67353C70C411EF9CC65F6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.107.0/24 103.244.221.0/24 103.244.223.0/24 103.249.184.0/24 103.249.186.0/24 Signature Algorithm: sha256WithRSAEncryption b0:95:94:da:8f:c2:2a:01:21:6c:99:0f:b2:be:74:e8:e8:48: 44:be:b7:b4:dc:c6:8f:93:08:71:66:71:af:8a:0b:f3:7b:a2: de:47:8f:54:59:c2:5c:bd:6f:31:0a:78:9c:95:f8:f9:40:aa: c3:29:f8:b8:e7:75:69:57:9d:06:a1:96:4d:f4:e2:42:be:ec: bd:30:17:ec:61:56:07:4f:1b:7d:db:f4:f1:1f:fd:e3:4f:a4: 1b:38:46:30:65:10:c4:a8:16:c9:d1:a2:cc:25:f5:a3:5c:a1: 8d:62:fe:49:a4:62:fe:9d:87:ff:f0:61:9f:bd:87:71:a0:cb: 02:2e:b8:3b:a1:04:0b:3d:de:cd:32:0c:66:9f:a5:12:c7:bc: 18:51:76:63:1e:c3:e7:65:df:fe:6f:90:8e:2f:fc:7f:9e:53: 94:ac:9c:ff:4e:6c:7d:01:60:9a:38:1d:02:a8:f6:c4:9f:b1: ec:16:c8:c9:7d:77:fc:b7:6e:f7:56:d0:02:26:61:6f:a0:79: fd:4d:bf:19:60:9a:af:a4:35:4c:04:e4:a3:99:3f:fd:52:9b: 1e:26:63:a9:48:07:fd:7e:52:38:39:97:e4:33:3a:11:86:6b: 1d:ac:73:14:61:63:cd:92:83:7f:6a:4b:39:21:ae:6b:5e:aa: db:98:1e:f4 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICCqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjQwOTEyMDUwNjQ1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUyNzZlNS02YWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TjVdLBaQp3M5ssPMFVWksEYocFX9LsG4K+ef+imEnJA7ZP1dWDQxR9rb57o IUMLqOANImVRFjEBy9ncoboQIXOyn/nkjJVd9jhXcaE9raEgNk5S5wZ7jnrivJ6o 8PZItgiPQmvkl8Nohgd8iBihIjiDvQDV88q00CbVP/IzZ2c/964pdFVCuO4cPERI kyBn1/OXuqhs+XPC+oQkcLC0QTXg1tdFpqRGZwbixD6Azd+LdzKxm844+4r8tAVT PshMTzYcLmgIAlmMXfY845OjcOOAY9/EA4IL+kApk+cnL3YQCVPW2N2DXp8WGCzM i+bEBvoW4UVKXG2Fpf+UgVmdzQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFOqMHm2M rwD6j0BCLeiHpX/IxLfuMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvQ0U2NzM1M0M3 MEM0MTFFRjlDQzY1RjZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAAr72sDBABn9N0DBABn9N8DBABn+bgDBABn+bowDQYJKoZI hvcNAQELBQADggEBALCVlNqPwioBIWyZD7K+dOjoSES+t7Tcxo+TCHFmca+KC/N7 ot5Hj1RZwly9bzEKeJyV+PlAqsMp+LjndWlXnQahlk304kK+7L0wF+xhVgdPG33b 9PEf/eNPpBs4RjBlEMSoFsnRoswl9aNcoY1i/kmkYv6dh//wYZ+9h3GgywIuuDuh BAs93s0yDGafpRLHvBhRdmMew+dl3/5vkI4v/H+eU5SsnP9ObH0BYJo4HQKo9sSf sewWyMl9d/y3bvdW0AImYW+gef1Nvxlgmq+kNUwE5KOZP/1Smx4mY6lIB/1+Ujg5 l+QzOhGGax2scxRhY82Sg39qSzkhrmteqtuYHvQ= -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:58 2024 by rpki-client on console-fra.rpki-client.org